May <var data-var='date'>16</var>, <var data-var='time'>20:49</var> UTC Resolved - This incident has been resolved. May <var data-var='date'>16</var>, <var data-var='time'>20:17</var> UTC Update - Threat detection for our Government CrowdStrike customers may be delayed due to an incident with CrowdStrike’s Falcon Data Replicator. This incident will be updated as additional information becomes available from CrowdStrike. May <var data-var='date'>16</var>, <var data-var='time'>20:13</var> UTC Identified - Threat detection for our Government CrowdStrike customers may be delayed due to an incident with CrowdStrike’s Falcon Data Replicator. This incident will be updated as additional information becomes available from CrowdStrike.

Detection delayed for CrowdStrike customers

May <var data-var='date'>16</var>, <var data-var='time'>00:46</var> UTC Resolved - This incident has been resolved. May <var data-var='date'>16</var>, <var data-var='time'>00:45</var> UTC Update - We are continuing to work on a fix for this issue. May <var data-var='date'> 6</var>, <var data-var='time'>23:38</var> UTC Identified - Customers using Red Canary as an IdP or a third‑party IdP with certificate validation enabled must rotate the SSO certificate before Friday to avoid login failures. Non‑SSO customers are unaffected. Visit the following support article for information regarding how to check your IdP Configuration: https://support.redcanary.com/hc/en-us/articles/40275397886103-Checking-Your-IdP-s-SAML-SP-Certificate-Configuration Contact zendesk@redcanary.com for further assistance.

Urgent: SSO Certificate Expires Friday

May <var data-var='date'> 9</var>, <var data-var='time'>05:46</var> UTC Resolved - This incident has been resolved. May <var data-var='date'> 8</var>, <var data-var='time'>23:07</var> UTC Identified - The issue has been identified and a fix is being implemented. May <var data-var='date'> 8</var>, <var data-var='time'>22:40</var> UTC Investigating - We are investigating an issue impacting AWS ingestors, which is causing a delay in our processing of Cloudtrail and GuardDuty alerts.

Cloudtrail and GuardDuty alert processing delay

Apr <var data-var='date'> 8</var>, <var data-var='time'>22:16</var> UTC Resolved - Monitoring has confirmed the system is operating normally and detections are no longer delayed. Apr <var data-var='date'> 8</var>, <var data-var='time'>19:50</var> UTC Monitoring - We are currently investigating reports of intermittent detection delays. The issue has been identified and a fix has been implemented. We are monitoring the system to confirm that it is returning to normal operations.

Investigating issues with delayed detections

Apr <var data-var='date'> 7</var>, <var data-var='time'>03:34</var> UTC Resolved - This incident has been resolved. Apr <var data-var='date'> 7</var>, <var data-var='time'>02:19</var> UTC Monitoring - We are monitoring the system to confirm that it is returning to normal operations. Apr <var data-var='date'> 6</var>, <var data-var='time'>23:26</var> UTC Investigating - We are investigating delayed telemetry surrounding Google Cloud Platform data due to underlying issues in the AWS Cloud Platform. We have notified the AWS production engineering team and are monitoring the issue to ensure they resolve the issue promptly. Telemetry, events, and detections may be delayed in our Web Portal, APIs, and systems that leverage those APIs such as Canary Exporter for GCP telemetry.

Investigating Issues with Google Cloud Platform

Jan <var data-var='date'>23</var>, <var data-var='time'>02:28</var> UTC Completed - We are completed with our maintenance and should be back online. Jan <var data-var='date'>23</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jan <var data-var='date'>20</var>, <var data-var='time'>23:16</var> UTC Scheduled - We will be undergoing scheduled maintenance during this time.

Scheduled Maintenance

Jan <var data-var='date'> 8</var>, <var data-var='time'>04:00</var> UTC Completed - The scheduled maintenance has been completed. Jan <var data-var='date'> 8</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Jan <var data-var='date'> 5</var>, <var data-var='time'>20:37</var> UTC Scheduled - We will be undergoing routine database upgrade maintenance. The expected downtime should be no longer than 2 hours.

Database Upgrade

Dec <var data-var='date'> 5</var>, <var data-var='time'>01:56</var> UTC Resolved - This incident has been resolved. Dec <var data-var='date'> 4</var>, <var data-var='time'>22:33</var> UTC Monitoring - We are investigating ingestion issues with VMware Carbon Black Response services hosted by Red Canary. Sensor telemetry, events, and detections may be delayed in our Web Portal, APIs, and systems that leverage those APIs such as Canary Exporter. New sensor connections and installations may be impacted. The issue has been identified and a fix is being implemented. We are monitoring the system to confirm that it is returning to normal operations.

Investigating issues with VMware Carbon Black Response

Nov <var data-var='date'>26</var>, <var data-var='time'>04:00</var> UTC Completed - The scheduled maintenance has been completed. Nov <var data-var='date'>26</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Nov <var data-var='date'>24</var>, <var data-var='time'>17:36</var> UTC Scheduled - Red Canary will be performing routine database maintenance during the upcoming maintenance window. During this time, your Red Canary portal may be inaccessible and publication of some Detections may be delayed.

Nov <var data-var='date'>20</var>, <var data-var='time'>06:00</var> UTC Completed - The scheduled maintenance has been completed. Nov <var data-var='date'>20</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Nov <var data-var='date'>19</var>, <var data-var='time'>16:42</var> UTC Scheduled - Red Canary will be performing scheduled maintenance on Wednesday 2025-11-19 from 19:00MT to 23:00MT. We will continue to ingest and process data during this period, however Cloud and Identity data processing may be delayed during this time. No data loss is expected. [This is an update to the maintenance previously scheduled]

[Updated] Scheduled maintenance on Wednesday 2025-11-19

Nov <var data-var='date'>19</var>, <var data-var='time'>16:38</var> UTC Update - The scheduled maintenance has been completed. Nov <var data-var='date'>19</var>, <var data-var='time'>06:00</var> UTC Completed - The scheduled maintenance has been completed. Nov <var data-var='date'>19</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Nov <var data-var='date'>18</var>, <var data-var='time'>18:24</var> UTC Scheduled - Red Canary will be performing scheduled maintenance on Wednesday 2025-11-19 from 19:00MT to 23:00MT. We will continue to ingest and process data during this period, however Cloud and Identity data processing may be delayed during this time. No data loss is expected.

Scheduled maintenance on Wednesday 2025-11-19

Nov <var data-var='date'>11</var>, <var data-var='time'>12:57</var> UTC Resolved - This incident has been resolved. Nov <var data-var='date'>11</var>, <var data-var='time'>12:33</var> UTC Monitoring - We are currently experiencing data processing delays, resulting in late detection notification to some customers.

Data processing delays

Nov <var data-var='date'> 5</var>, <var data-var='time'>03:12</var> UTC Completed - The scheduled maintenance has been completed. Nov <var data-var='date'> 5</var>, <var data-var='time'>02:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Oct <var data-var='date'>31</var>, <var data-var='time'>18:53</var> UTC Scheduled - Red Canary will be performing routine database maintenance during the upcoming maintenance window. During this time, your Red Canary portal may be inaccessible and publication of some Detections may be delayed.

Nov <var data-var='date'> 1</var>, <var data-var='time'>12:28</var> UTC Resolved - This incident has been resolved. Oct <var data-var='date'>31</var>, <var data-var='time'>21:55</var> UTC Update - We are continuing to work on a fix for this issue. Oct <var data-var='date'>31</var>, <var data-var='time'>18:17</var> UTC Identified - We have identified an issue that is causing intermittent delays in processing cloud and identity data. We are actively working on a fix. Detections may be delayed.

Intermittent Delays for Cloud and Identity Data

Oct <var data-var='date'>29</var>, <var data-var='time'>22:18</var> UTC Resolved - This incident has been resolved. Oct <var data-var='date'>29</var>, <var data-var='time'>21:43</var> UTC Monitoring - Microsoft Office 365 external service integrations are now functioning as expected. Detections may be delayed as we process the backlog. Oct <var data-var='date'>29</var>, <var data-var='time'>17:16</var> UTC Investigating - We are aware of a reported degradation with the manage.office.com domain that is impacting some Microsoft Office 365 services. At this time telemetry and detections for Microsoft Office 365 External Service Integrations may be delayed.

Investigating issues resulting from reported Azure outage

Oct <var data-var='date'>27</var>, <var data-var='time'>22:18</var> UTC Resolved - This incident has been resolved. Oct <var data-var='date'>27</var>, <var data-var='time'>21:06</var> UTC Identified - We identified an issue impacting data processing for Google Workspace customers and have implemented a fix. Detections may be delayed.

Data Processing Delays for Google Workspace

Oct <var data-var='date'>24</var>, <var data-var='time'>21:53</var> UTC Resolved - This incident has been resolved. Oct <var data-var='date'>24</var>, <var data-var='time'>16:17</var> UTC Monitoring - We are processing a large backlog of data and detections may be delayed.

Oct <var data-var='date'>20</var>, <var data-var='time'>22:55</var> UTC Resolved - This incident has been resolved. Services are operating as expected. Oct <var data-var='date'>20</var>, <var data-var='time'>16:38</var> UTC Monitoring - We are aware of a reported AWS degradation that may be impacting some services. At this time, telemetry for Jamf Threat Defense and VMware Carbon Black Response, hosted by Red Canary, may experience delays. We have observed signs of recovery in the affected services and continue to monitor the situation closely.

Investigating issues resulting from reported AWS outage

Oct <var data-var='date'>20</var>, <var data-var='time'>10:31</var> UTC Resolved - This incident has been resolved. Services are operating as expected. Oct <var data-var='date'>20</var>, <var data-var='time'>10:09</var> UTC Monitoring - We are aware of a reported AWS degradation that may be impacting some services. At this time, telemetry for Jamf Threat Defense and VMware Carbon Black Response, hosted by Red Canary, may experience delays. We have observed signs of recovery in the affected services and continue to monitor the situation closely.

Oct <var data-var='date'>16</var>, <var data-var='time'>00:56</var> UTC Resolved - This incident has been resolved. Oct <var data-var='date'>15</var>, <var data-var='time'>23:31</var> UTC Monitoring - A fix has been implemented and we are monitoring the results. Oct <var data-var='date'>15</var>, <var data-var='time'>21:55</var> UTC Identified - The issue has been identified and a fix is being implemented. Oct <var data-var='date'>15</var>, <var data-var='time'>21:20</var> UTC Investigating - We are currently investigating an issue with some pages being unavailable in the Red Canary portal. We will update this incident as more information becomes available.

Red Canary portal issue under investigation

Sep <var data-var='date'>23</var>, <var data-var='time'>03:00</var> UTC Completed - The scheduled maintenance has been completed. Sep <var data-var='date'>23</var>, <var data-var='time'>01:00</var> UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep <var data-var='date'>18</var>, <var data-var='time'>19:54</var> UTC Scheduled - Red Canary will be performing routine database maintenance during the upcoming maintenance window. During this time, your Red Canary portal may be inaccessible and publication of some Detections may be delayed.

Sep <var data-var='date'>18</var>, <var data-var='time'>18:40</var> UTC Resolved - This incident has been resolved. Sep <var data-var='date'>18</var>, <var data-var='time'>18:18</var> UTC Identified - We have identified an issue that is causing the Red Canary web portal and API requests to return errors intermittently for some customers. We are implementing a fix and will update this incident upon resolution of the impact.

Web Portal / API errors

Sep <var data-var='date'>10</var>, <var data-var='time'>18:30</var> UTC Resolved - Our fix has been implemented, tested, and deployed. We've validated the portal is no longer degraded and pages that may have appeared to be missing are present. Sep <var data-var='date'>10</var>, <var data-var='time'>17:39</var> UTC Identified - We have identified an issue that may be causing a degraded portal experience for our customers. Some portal pages may be slower to respond or appear missing. A fix has been identified and is currently being implemented and tested. We will provide more information as soon as possible.

Some portal pages are degraded or may appear missing

Aug <var data-var='date'>14</var>, <var data-var='time'>19:02</var> UTC Resolved - This incident has been resolved. SentinelOne has fixed the issue on their end, processed their backlog, and we are receiving data again. Aug <var data-var='date'>13</var>, <var data-var='time'>20:49</var> UTC Identified - SentinelOne declared an incident earlier today that has caused delays in receiving data from their platform: https://status.sentinelone.com/incidents/b03z8dft06hs We have engaged SentinelOne to determine how large their backlogs are and when we can expect to see data flow resume. We will update this incident as we learn more. Detections based on SentinelOne data may be delayed.

Data ingest delayed for SentinelOne customers

Aug <var data-var='date'>12</var>, <var data-var='time'>17:38</var> UTC Resolved - We have determined the errors are due to a configuration change with CBC that required customers to make changes to their environments. Therefore this affects a small percentage of our customers and we are engaging with them directly to make the required changes. Aug <var data-var='date'>12</var>, <var data-var='time'>15:35</var> UTC Investigating - We are currently observing errors with Broadcom VMware Carbon Black Cloud's alert APIs. Ingestion of CBC alerts are currently failing. We have engaged CBC to determine the cause of the errors and will post more information here as we get it. Detections based on CBC alerts may be delayed.

Is Red Canary down?

Red Canary status is UP

Lastest published events

Detection delayed for CrowdStrike customers

Urgent: SSO Certificate Expires Friday

Cloudtrail and GuardDuty alert processing delay

Red Canary Services, Components and Regions

Recent Red Canary events

Detection delayed for CrowdStrike customers

Urgent: SSO Certificate Expires Friday

Cloudtrail and GuardDuty alert processing delay

Investigating issues with delayed detections

Investigating Issues with Google Cloud Platform

Scheduled Maintenance

Get your FREE account now,
5 monitors included!

Is Red Canary down?

Red Canary status is UP

Lastest published events

Detection delayed for CrowdStrike customers

Urgent: SSO Certificate Expires Friday

Cloudtrail and GuardDuty alert processing delay

Red Canary Services, Components and Regions

Recent Red Canary events

Detection delayed for CrowdStrike customers

Urgent: SSO Certificate Expires Friday

Cloudtrail and GuardDuty alert processing delay

Investigating issues with delayed detections

Investigating Issues with Google Cloud Platform

Scheduled Maintenance

Get your FREE account now,5 monitors included!

Get your FREE account now,
5 monitors included!